Automated satellite device authentication to a portal for secure remote access

Abstract

Techniques for automated satellite device authentication to a portal for secure remote access are disclosed. In some embodiments, a system, a process, and/or a computer program product for automated satellite device authentication to a portal for secure remote access include receiving, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment; receiving, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and authenticating the new satellite at the portal using the serial number and the IP address associated with the new satellite.

What is claimed is: 
     
         1 . A system comprising:
 a processor configured to:
 receive, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment; 
 receive, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and 
 authenticate the new satellite at the portal using the serial number and the IP address associated with the new satellite; and 
   a memory coupled to the processor and configured to provide the processor with instructions.   
     
     
         2 . The system of  claim 1 , wherein the IP address associated with the new satellite for deployment in the LSVPN deployment is added to an IP address allowed list in a data store associated with the portal. 
     
     
         3 . The system of  claim 1 , wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel. 
     
     
         4 . The system of  claim 1 , wherein the portal automatically authenticates the new satellite using the serial number and the IP address associated with the new satellite by verifying that the serial number was previously configured at a data store associated with the portal and verifying that the IP address was previously added in an IP address allowed list in the data store associated with the portal. 
     
     
         5 . The system of  claim 1 , further comprising:
 sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and the IP address associated with the new satellite.   
     
     
         6 . The system of  claim 1 , further comprising:
 performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt.   
     
     
         7 . The system of  claim 1 , further comprising:
 performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt, wherein the retry is performed after expiration of a configured retry period of time.   
     
     
         8 . The system of  claim 1 , further comprising:
 sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and IP address associated with the new satellite; and   connecting from the new satellite to the one or more gateways, wherein the new satellite is securely connected to the one or more gateways that form the LSVPN deployment.   
     
     
         9 . A method comprising:
 receiving, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment;   receiving, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and   authenticating the new satellite at the portal using the serial number and the IP address associated with the new satellite.   
     
     
         10 . The method of  claim 9 , wherein the IP address associated with the new satellite for deployment in the LSVPN deployment is added to an IP address allowed list in a data store associated with the portal. 
     
     
         11 . The method of  claim 9 , wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel. 
     
     
         12 . The method of  claim 9 , wherein the portal automatically authenticates the new satellite using the serial number and the IP address associated with the new satellite by verifying that the serial number was previously configured at a data store associated with the portal and verifying that the IP address was previously added in an IP address allowed list in the data store associated with the portal. 
     
     
         13 . The method of  claim 9 , further comprising:
 sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and the IP address associated with the new satellite.   
     
     
         14 . The method of  claim 9 , further comprising:
 performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt.   
     
     
         15 . The method of  claim 9 , further comprising:
 performing a retry of the authenticating of the new satellite at the portal using the serial number and the IP address associated with the new satellite after a failed authentication attempt, wherein the retry is performed after expiration of a configured retry period of time.   
     
     
         16 . The method of  claim 9 , further comprising:
 sending a list of IP addresses for one or more gateways from the portal to the new satellite after successfully authenticating the new satellite using the serial number and IP address associated with the new satellite; and   connecting from the new satellite to the one or more gateways, wherein the new satellite is securely connected to the one or more gateways that form the LSVPN deployment.   
     
     
         17 . A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
 receiving, at a portal, a serial number and an IP address associated with a new satellite for deployment in a large scale virtual private network (LSVPN) deployment;   receiving, at the portal, the serial number and the IP address associated with the new satellite, wherein the new satellite is deployed at a remote location, and wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal; and   authenticating the new satellite at the portal using the serial number and the IP address associated with the new satellite.   
     
     
         18 . The computer program product of  claim 17 , wherein the IP address associated with the new satellite for deployment in the LSVPN deployment is added to an IP address allowed list in a data store associated with the portal. 
     
     
         19 . The computer program product of  claim 17 , wherein the new satellite automatically sends the serial number and the IP address associated with the new satellite to the portal via a secure communication channel. 
     
     
         20 . The computer program product of  claim 17 , wherein the portal automatically authenticates the new satellite using the serial number and the IP address associated with the new satellite by verifying that the serial number was previously configured at a data store associated with the portal and verifying that the IP address was previously added in an IP address allowed list in the data store associated with the portal.